Privacy Policy

Who we are

SKAIL is an AI marketing platform operated by Skylite Group Ltd. This policy explains what data we collect, why, and the choices you have. It applies to skail.skylite.group and the SKAIL API.

Data we collect

Account data: your name, email and workspace details, provided when you sign in with SAIG single sign-on.

Connected platform credentials: when you connect services (for example a Meta Page, an ad account, WhatsApp, Google, or a WordPress site), we store the tokens and secrets needed to act on your instructions. These are encrypted at rest.

Marketing data processed on your behalf: leads, enquiries, campaign content and performance metrics that flow through your workspace. For this data, the workspace owner is the data controller and SKAIL acts as a processor.

WhatsApp messaging data: where you connect a WhatsApp Business account, we process the phone numbers you message, the content of those messages and their delivery status, and the replies your customers send. We also record when and where each customer gave permission to be messaged, and any withdrawal of that permission — we are required to be able to evidence consent, and it is what allows us to refuse a message that should not be sent.

Technical data: logs and usage records needed to run, secure and improve the service.

How we use data

To provide the product: running campaigns, generating content, capturing and routing leads, and reporting performance — only as directed by the workspace that owns the data.

We do not sell personal data. We do not use your leads or content to advertise to anyone else.

Platforms you connect

When you connect a platform (such as Meta, Google, WhatsApp or WordPress), we exchange data with that platform solely to perform the actions you request, under that platform's terms. You can disconnect any of them at any time, which stops further access.

Sub-processors

These are the companies that process data on our behalf so we can run the service. We list them by name because a general statement that we 'use third parties' is not enough for you to make an informed decision, and UK GDPR requires a controller to know who is in the chain.

Vercel Inc. — application hosting. United States, United Kingdom, Germany.

Supabase Inc. — database and file storage. United States, United Kingdom.

Amazon Web Services — email delivery. United States, Ireland, United Kingdom.

Anthropic PBC — AI generation of content you request. United States.

Cloudflare Inc. — AI generation of images and speech. United States.

Meta Platforms — where you have connected WhatsApp, Facebook or Instagram, message and advertising delivery.

We will update this list before adding a sub-processor that handles personal data. If you need advance notice of changes, contact us and we will add you to the notification list.

Retention and security

Data is retained while your workspace is active. Secrets and credentials are encrypted at rest, transport is encrypted with TLS, and access is restricted to what the service needs to operate.

WhatsApp message content is retained for 24 months so that a business can see its own conversation history, then deleted. Consent records are kept for as long as we may need to evidence them, including after a message is deleted — a record that you asked not to be contacted is the one thing we should not lose.

If your workspace is closed, we delete its data within 90 days, except where we are required to keep records for legal or accounting reasons.

Your rights and choices

You can disconnect any connected platform at any time from your dashboard, which stops further access to it. You may request access to, correction of, or deletion of your personal data — see our data deletion page or contact us.

Requests from public authorities

We have not received a national security request for user data. If we receive a request from any public authority, we will check that it is lawful and properly served before responding, disclose only the minimum information required, challenge it where we believe it is unlawful, and keep a record of the request and our response.

Where we are legally permitted to do so, we will tell the affected workspace.

Contact

Skylite Group Ltd — privacy@skylite.group. If this policy changes materially, we will update this page.